Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
File: cMuWVD9-GVcj5tEiwpR4v92gPsw.mft (raw, json)
Hash identifier: pYk27Hx/iJ313zbovJT/qpgcfCSq7R4VgnCw/OHJWKI=
Subject key identifier: B4:B4:C9:9E:97:04:92:E2:A7:1D:34:72:0D:FD:07:32:DD:B9:F7:E2
Authority key identifier: 70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC
Certificate issuer: /CN=70cb96543f7e195723e6d122c29478bfdda03ecc
Certificate serial: 01968A37823B4A66B8CFF5490345D6537455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
Manifest number: 09AE
Signing time: Thu 01 May 2025 05:00:15 +0000
Manifest this update: Thu 01 May 2025 05:00:15 +0000
Manifest next update: Fri 02 May 2025 05:00:15 +0000
Files and hashes: 1: 8anvDKitwmoS5b1R9CoiYAIvV4s.roa (hash: sK8EhnVxeI2sQ1OgOLzF1LkVF8lOtqG5DcBtonQ6uEM=)
2: cMuWVD9-GVcj5tEiwpR4v92gPsw.crl (hash: ElNdTfse2l11RQMFEiAZV6eL+5RfIlBW+HF9uRaMpkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:37:82:3b:4a:66:b8:cf:f5:49:03:45:d6:53:74:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cb96543f7e195723e6d122c29478bfdda03ecc
Validity
Not Before: May 1 05:00:15 2025 GMT
Not After : May 2 05:00:15 2025 GMT
Subject: CN=b4b4c99e970492e2a71d34720dfd0732ddb9f7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:01:5b:13:f1:b7:64:b5:2d:c1:eb:86:85:
ad:1d:21:ed:5c:d5:69:16:08:ac:3a:f4:da:d5:a3:
27:b3:e3:4f:0e:03:e4:dc:02:c8:a6:2d:fb:ce:2a:
ec:10:c0:d9:39:30:86:c8:62:dd:49:f6:b0:1d:40:
e4:04:e9:99:21:08:15:cd:93:24:7a:61:6d:0c:86:
48:70:0d:82:2a:59:7e:b5:c5:61:f8:7f:68:8a:76:
98:99:f1:64:ea:e0:77:29:eb:6c:a4:f5:b3:69:aa:
38:47:9b:de:c7:a4:39:4a:36:3a:19:65:f0:bf:9c:
1b:21:84:97:f8:3c:27:ed:ab:93:61:e6:fd:4b:3a:
c4:75:7c:12:62:41:e9:e9:b0:b7:fc:42:5c:49:94:
9d:45:c6:6d:ed:d1:f9:71:63:09:a2:7a:d2:7b:0c:
be:ad:ba:0b:82:5e:90:ca:ab:c6:0f:f9:09:c4:7f:
e9:c3:44:aa:c7:4f:84:bf:78:59:c9:66:18:08:ff:
92:52:f8:14:74:09:6e:8b:d3:d7:2b:5f:04:ac:2f:
d7:aa:33:0e:6a:a2:23:de:a9:39:79:b6:5d:64:c1:
af:df:59:cd:73:47:04:49:6b:9b:92:66:0b:db:84:
ad:ba:09:5b:30:31:7d:9b:fc:40:53:62:a1:39:e9:
c2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B4:C9:9E:97:04:92:E2:A7:1D:34:72:0D:FD:07:32:DD:B9:F7:E2
X509v3 Authority Key Identifier:
keyid:70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e5:85:34:c5:13:e6:86:40:49:14:f6:fe:d5:7f:ee:8c:72:
0c:a2:90:8d:2b:21:db:43:49:a0:6d:95:1d:c0:93:14:7a:96:
90:bb:e2:83:ea:71:b7:91:5c:79:9c:87:f6:bc:c2:a7:1f:9a:
c3:3d:9b:a7:d9:d5:5d:ba:38:6a:51:3d:74:ca:2c:c8:2a:c1:
38:e2:23:b3:1d:0d:a4:92:ca:f4:ed:0b:34:61:46:37:2b:3d:
6b:da:d8:b0:6a:4d:5b:75:0c:8f:c9:f0:f5:5f:cc:c7:53:a0:
f8:e9:8c:91:67:cf:f5:98:e4:9c:32:11:a8:8a:65:34:45:c5:
3f:b8:dc:2a:95:2e:93:7f:d3:10:f4:ea:8a:dc:19:d6:dd:f1:
08:f0:d5:8f:48:c1:62:08:a4:47:c5:a3:ad:60:ed:35:ea:8c:
b4:c0:f8:70:21:71:36:7e:5a:51:a8:dc:29:5b:11:c8:e9:81:
63:7c:ad:ec:33:6c:68:e2:8d:4a:a0:3b:e1:91:11:52:dd:ad:
ac:86:3d:55:15:5a:48:de:e5:c2:26:b6:8a:10:2d:b2:6f:b4:
a9:4b:fa:be:2b:e1:af:66:44:7e:7d:c3:cf:f2:c3:5c:48:0b:
7a:d1:19:51:05:5e:21:68:1b:29:55:22:f7:aa:a9:30:2b:4b:
60:ff:92:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:31:01 2025 by rpki-client